Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/e504793c-c209-469a-8e3c-eb3f5a83863f/0/3130332e35352e32392e302f32342d3234203d3e20313530343837.roa
File: 3130332e35352e32392e302f32342d3234203d3e20313530343837.roa (raw, json)
Hash identifier: dgvJ75S36t6FOwxv3jhvwf3Y8MTUYV+ZDDSbS2BsLKg=
Subject key identifier: CD:2D:93:B9:EB:E7:35:56:E5:16:0F:56:C9:A9:4D:39:46:1F:F2:79
Certificate issuer: /CN=FA86E23853549D2EF1D9F9C9222147A550E36A38
Certificate serial: 4751606F9BD3C7FE27F68C0FD6947BA900D5DEAD
Authority key identifier: FA:86:E2:38:53:54:9D:2E:F1:D9:F9:C9:22:21:47:A5:50:E3:6A:38
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FA86E23853549D2EF1D9F9C9222147A550E36A38.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/e504793c-c209-469a-8e3c-eb3f5a83863f/0/3130332e35352e32392e302f32342d3234203d3e20313530343837.roa
Signing time: Sun 01 Dec 2024 05:00:02 +0000
ROA not before: Sun 01 Dec 2024 04:55:02 +0000
ROA not after: Sun 30 Nov 2025 05:00:02 +0000
asID: 150487
IP address blocks: 103.55.29.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 09 Jan 2025 23:16:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
47:51:60:6f:9b:d3:c7:fe:27:f6:8c:0f:d6:94:7b:a9:00:d5:de:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FA86E23853549D2EF1D9F9C9222147A550E36A38
Validity
Not Before: Dec 1 04:55:02 2024 GMT
Not After : Nov 30 05:00:02 2025 GMT
Subject: CN=CD2D93B9EBE73556E5160F56C9A94D39461FF279
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:a7:a8:06:7f:ac:af:d3:14:7f:41:e7:b1:a1:
4d:9b:aa:5f:f2:94:ae:90:a2:d9:29:a2:17:e1:4c:
97:67:b8:bb:d3:71:8c:51:50:78:9f:d7:53:00:eb:
fc:de:b6:55:db:24:f4:76:ce:c4:e5:43:53:67:c8:
3f:0d:27:6d:b7:d6:49:e8:51:b0:dd:02:e8:a5:ce:
68:eb:37:bd:60:34:3f:04:5a:63:19:6a:4b:ec:12:
d2:30:1c:dd:9a:3b:2e:8e:38:85:6b:77:0d:bb:95:
f5:62:1a:6b:ea:e8:38:6a:95:13:7e:c2:3e:2e:8c:
75:3b:c5:a9:cf:2a:85:3e:07:7a:a1:bd:ed:c4:03:
a9:b9:3e:11:ee:67:94:3a:85:7b:d6:bd:7f:ae:68:
bb:21:81:56:ee:cf:07:c4:f2:e7:eb:30:dd:5e:bc:
02:85:cb:96:ee:e3:28:60:d8:d0:5a:ed:e6:e6:fa:
d6:49:6f:d9:91:07:95:7f:e3:14:9e:fd:50:1a:0c:
dc:19:9a:4c:f7:1e:eb:42:f3:54:9f:fb:d1:cd:ce:
0b:75:60:c2:8f:84:d2:d7:04:28:73:7b:98:df:de:
1f:cb:e3:b0:3e:a6:94:69:63:69:27:95:d7:83:3f:
95:3e:d3:49:e5:9b:46:78:96:73:5b:d5:42:8b:21:
61:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:2D:93:B9:EB:E7:35:56:E5:16:0F:56:C9:A9:4D:39:46:1F:F2:79
X509v3 Authority Key Identifier:
keyid:FA:86:E2:38:53:54:9D:2E:F1:D9:F9:C9:22:21:47:A5:50:E3:6A:38
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/e504793c-c209-469a-8e3c-eb3f5a83863f/0/FA86E23853549D2EF1D9F9C9222147A550E36A38.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FA86E23853549D2EF1D9F9C9222147A550E36A38.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e504793c-c209-469a-8e3c-eb3f5a83863f/0/3130332e35352e32392e302f32342d3234203d3e20313530343837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.55.29.0/24
Signature Algorithm: sha256WithRSAEncryption
18:bc:67:06:69:1a:9c:5b:1e:d7:ef:97:5d:3e:7e:eb:16:b3:
21:33:57:97:d6:c6:40:b8:42:3d:05:12:05:10:62:1b:e3:a8:
5f:90:f0:6a:02:fc:3e:41:97:f3:b6:16:2d:a9:ec:ff:20:de:
dd:35:c8:0f:aa:f0:19:70:f9:24:3f:e3:91:7f:21:87:cd:c8:
a9:1e:1c:33:97:94:76:95:7c:6e:f9:68:f6:b6:33:b8:a4:b2:
70:41:38:17:cb:96:0d:d1:41:e7:4d:72:dc:40:a0:5f:b2:c9:
20:4d:a9:99:ed:64:c3:a7:f1:31:97:8a:21:c3:32:32:aa:14:
c5:15:06:0c:39:52:ba:eb:e7:49:3e:21:3c:07:2f:cb:08:28:
d1:1c:72:62:ac:87:7c:9a:0b:b6:15:e1:dc:fd:5b:b3:bc:3f:
b7:9f:8b:19:c2:4a:4c:25:12:a1:c1:59:4d:c3:f6:ed:c4:a3:
7b:d6:9a:e4:90:db:3b:28:3e:4a:aa:c1:71:d7:59:14:04:cc:
67:d7:04:36:72:e2:2f:50:28:9e:3c:20:b9:08:14:58:c2:8a:
9a:0e:c3:06:d3:25:4d:92:7a:c3:67:d3:2f:e6:92:85:bd:a7:
90:aa:e6:f7:d6:d8:75:94:e4:48:87:dc:fa:fb:1d:c8:a9:4e:
99:97:7d:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 10 01:49:30 2025 by rpki-client on console.sobornost.net